sushi-wbtc[.]top

The domain sushi-wbtc.top was registered on 21 February 2026 and currently resolves to IP 107.172.83.150, which is assigned to AS36352 (HostPapa) in the United States. The site is presently taken offline, returning no HTTP content, but historical evidence shows it served a page titled “Stake SUSHI | Sushi”, indicating an attempt to mimic the SushiSwap brand. The domain has been classified as a crypto‑related brand‑impersonation campaign, targeting users of the SushiSwap platform. Reputation services reflect extreme distrust: Scamadviser assigns a 1‑out‑of‑100 score, Gridinsoft rates it 0 / 100, and the SSL certificate receives an R10 rating, suggesting weak or improperly configured encryption.

Malware and phishing detection services have flagged the domain; VirusTotal reports a single positive detection out of 93 scanners, and the domain appears on at least one public blocklist, including PhishDestroy. The limited detection footprint and the single positive result imply that the malicious payload, if any, has not been widely distributed, but the presence on a blocklist confirms active abuse. Infrastructure analysis shows the host is a shared hosting provider, which often facilitates rapid turnover of malicious sites. The exact content that was delivered before takedown has not been archived, leaving the specifics of the phishing flow uncertain.

Defenders should continue to block the domain at perimeter gateways, monitor DNS queries for the IP 107.172.83.150 and its ASN, and update internal threat‑intel feeds with the indicator set (domain, IP, hosting ASN). Given the brand‑impersonation nature, security awareness training should remind users that legitimate SushiSwap communications never originate from short‑lived domains and that any request to “stake SUSHI” on an unrelated URL should be treated as suspicious. Continuous re‑evaluation is advised in case the domain is re‑registered or the hosting provider is leveraged for new malicious campaigns.